Fig. REF  illustrates the network design of the proposed method.
Our watermarking scheme follows the traditional data hiding pipeline, which mainly contains three phases, namely, watermark embedding, attacking simulation and forgery detection. We use two independent three-dimensional U-shaped architecture [1]} to hide auto-generated watermark into an original video, and localize the tampered areas on receiving the attacked version, respectively.
In detail, given an original video \(\mathbf {V}\) , we transform the original video \(\mathbf {V}\)  into the watermarked video \(\mathbf {V}_E\)  using the encoder. The attacking layer performs both tampering and benign video post-processing attacks on \(\mathbf {V}_E\)  to generate \(\mathbf {V}_{\emph {ATK}}\) . In this stage, the hidden information might be globally or locally destroyed. On the recipient's side, the decoder produces the predicted tampering mask \(\hat{\mathbf {M}}\)  to see which parts of the video are tampered with. The architectures of the encoder and decoder are shown in Fig. REF .
